This is scam involving Citibank and its affiliate bank in Mexico (Banamex) so beware!
Like paypal or ebay, they send an email that looks legitime saying that some changes were detected so it was necessary to update your profile online to reflect those changes before proceed to any onlinetransaction
the headers in the scam email have this as return path [email protected]
Received: from mail6.atl.registeredsite.com(mail6.atl.registeredsite.com [64.224.219.80]) by fallback-mx2.atl.registeredsite.com
Message-id: <[email protected]>
Any of the above domains is reachable except wazooweb.com which limits the access to clients in order to contact them. All the emails in the whois are fake, including hosting4u.net which is the company providing the DNS
The fake interface is located at http://209.204.254.59/empresa/empre...al.banamex.com.mx/empresa/serban/bankmain.htm
209.204.254.59 is a "coming soon site" which appears as hosted at Olm Web Hosting (olm.net) where no contact email either but at least phone numbers.
Like paypal or ebay, they send an email that looks legitime saying that some changes were detected so it was necessary to update your profile online to reflect those changes before proceed to any onlinetransaction
the headers in the scam email have this as return path [email protected]
Received: from mail6.atl.registeredsite.com(mail6.atl.registeredsite.com [64.224.219.80]) by fallback-mx2.atl.registeredsite.com
Message-id: <[email protected]>
Any of the above domains is reachable except wazooweb.com which limits the access to clients in order to contact them. All the emails in the whois are fake, including hosting4u.net which is the company providing the DNS
The fake interface is located at http://209.204.254.59/empresa/empre...al.banamex.com.mx/empresa/serban/bankmain.htm
209.204.254.59 is a "coming soon site" which appears as hosted at Olm Web Hosting (olm.net) where no contact email either but at least phone numbers.
Last edited:
